Does anyone know whether this is possible or not? And what would happen if you enable WATO on the distributed sites? I assume changes won’t sync both ways?
Unfortunately, the SAML authentication has not been implemented for the Distributed setup yet like its there for LDAP connection (Setup >> General >> Distributed monitoring >> Configuration connnection >> Sync with LDAP connection) where you can sync users with different connection options. So, its not possible at the moment.
Maybe you can create an idea on https://ideas.checkmk.com/ ?